Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3df9a59d-b357-3204-8e3b-884d6652ccfa.roa
File:                     3df9a59d-b357-3204-8e3b-884d6652ccfa.roa (raw, json)
Hash identifier:          9Lt1cDmBVbSdeBfiM4rT70gWYHefnGxep5MrQ3YcLx4=
Subject key identifier:   4A:16:06:D1:3A:68:31:60:DA:0A:C6:00:BE:56:FE:65:F5:0A:28:C3
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DE15085A5252D0E5E527D72C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3df9a59d-b357-3204-8e3b-884d6652ccfa.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     174
IP address blocks:        198.16.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:85:a5:25:2d:0e:5e:52:7d:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=3236064c-2802-4692-b922-01ec5d5aa179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:6f:f4:0b:4b:e4:28:16:0c:28:bb:d2:9b:
                    74:de:59:c2:cf:27:b1:91:af:de:99:a8:2e:b8:4a:
                    c5:67:41:55:1f:05:3e:ea:79:a9:e9:ea:b9:55:1e:
                    42:6a:58:b2:27:ce:a8:ed:0e:d8:78:32:5d:a4:ff:
                    6a:20:a1:ab:c0:1e:6c:df:1c:cc:cc:a6:c8:c2:7d:
                    e1:62:22:2b:be:04:36:62:22:62:cd:e8:35:3c:8f:
                    26:03:4e:8c:9c:69:8b:a8:01:46:a9:4c:3a:1d:8c:
                    de:68:15:3d:ad:70:c5:20:b6:5f:7e:4e:3e:4e:4d:
                    b4:be:11:bf:f4:30:40:ea:6c:26:fb:2d:c5:02:ff:
                    11:a0:8b:1e:8a:7b:8a:eb:f7:5b:4c:a9:25:91:f1:
                    69:ed:a3:de:6b:6a:39:f3:16:06:27:8b:03:69:52:
                    b1:af:4e:7b:3b:ce:58:ee:44:fb:24:62:e5:8f:e5:
                    c9:d7:9f:b0:90:f1:ce:7f:79:27:0c:d6:da:2f:c9:
                    ee:73:78:7d:59:b6:dc:0d:28:03:a1:eb:71:31:1e:
                    66:2d:b1:b1:b5:d1:8f:ac:fb:2f:24:ac:ad:22:b6:
                    bd:07:24:01:62:94:37:47:bd:3e:32:fc:88:36:36:
                    e6:3b:a2:b8:1a:80:72:b7:a7:ac:83:23:ba:2f:65:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:16:06:D1:3A:68:31:60:DA:0A:C6:00:BE:56:FE:65:F5:0A:28:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3df9a59d-b357-3204-8e3b-884d6652ccfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:7c:ff:01:08:27:70:aa:02:21:77:ce:d7:b6:08:ce:14:a3:
         84:dd:5c:9c:a5:f8:75:35:44:05:3b:49:03:38:99:03:8c:e0:
         79:38:a0:3f:fa:1b:3d:8c:e5:f4:90:be:86:27:18:bd:cf:00:
         2f:d2:4c:14:61:f5:ac:df:21:31:56:75:1e:2b:6e:06:df:bf:
         86:26:27:db:35:13:55:73:0a:07:42:64:fa:79:c7:cb:36:75:
         51:7d:93:25:b9:e3:ac:dc:8a:ed:b3:48:78:04:72:68:d6:82:
         8e:3d:53:b9:91:71:ed:d4:80:a1:06:4b:bf:91:e0:39:2f:38:
         f7:27:93:64:f5:2e:1f:ce:0a:da:19:ad:0b:92:52:0b:1a:bd:
         d9:3b:49:2e:b3:0a:08:b8:e1:87:a8:bb:54:a6:f4:54:47:2b:
         d1:56:2a:fc:b9:87:d4:9d:9c:e3:a2:b6:c4:50:0c:a1:a9:e3:
         48:23:f9:bf:5e:70:ad:c2:d7:eb:79:a7:1b:95:3c:af:ee:dd:
         57:53:23:f2:c8:1d:7c:e2:6d:e9:8a:25:89:44:33:25:7b:11:
         42:73:6c:59:33:bb:3b:1f:c6:bc:35:b1:bc:8c:53:8a:c8:0a:
         73:b1:99:1e:a5:50:d9:e4:ef:96:91:a1:ab:b3:a9:40:1d:af:
         c7:fb:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:35:01 2026 by rpki-client